Purpose of Audit

The purpose of our audit was to determine whether District officials properly safeguarded information technology (IT) assets for the period July 1, 2015 through June 27, 2017.

Background

The Cairo-Durham Central School District serves the Towns of Cairo, Durham, Athens, Catskill, Coxsackie and Greenville in Greene County, Conesville in Schoharie County, and Rensselaerville in Albany County. The District, which is governed by an elected nine-member Board of Education, has approximately 1,200 students. Budgeted appropriations for the 2016-17 fiscal year totaled approximately $29 million.

Key Findings

• IT-related policies were not adequate.
• Users accessed websites unrelated to business activities, and web filters were not adequate.

Key Recommendations

• Update the District’s IT policies.
• Require District employees to attend cybersecurity and awareness training, monitor Internet usage and configure the web filtering software to block access to sites that violate the acceptable use policy.